X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server.ts;h=7aaf1e553626049518e46cdec1e84ec51f5454e0;hb=4d7ce9218a3f695bf3d013cbdce1c5c6a5221927;hp=76d00edd3ae77ee0b2b6add58b1c461dbcb2a188;hpb=6328da8c017cf00d3c0ac8824ec5af128f6db42e;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server.ts b/server.ts index 76d00edd3..7aaf1e553 100644 --- a/server.ts +++ b/server.ts @@ -1,10 +1,7 @@ -// FIXME: https://github.com/nodejs/node/pull/16853 -import { VideosCaptionCache } from './server/lib/cache/videos-caption-cache' - -require('tls').DEFAULT_ECDH_CURVE = 'auto' +import { registerTSPaths } from './server/helpers/register-ts-paths' +registerTSPaths() import { isTestInstance } from './server/helpers/core-utils' - if (isTestInstance()) { require('source-map-support').install() } @@ -17,19 +14,21 @@ import * as cors from 'cors' import * as cookieParser from 'cookie-parser' import * as helmet from 'helmet' import * as useragent from 'useragent' -import * as anonymise from 'ip-anonymize' +import * as anonymize from 'ip-anonymize' +import * as cli from 'commander' process.title = 'peertube' // Create our main app -const app = express() +const app = express().disable("x-powered-by") // ----------- Core checker ----------- -import { checkMissedConfig, checkFFmpeg, checkConfig, checkActivityPubUrls } from './server/initializers/checker' +import { checkMissedConfig, checkFFmpeg, checkNodeVersion } from './server/initializers/checker-before-init' // Do not use barrels because we don't want to load all modules here (we need to initialize database first) +import { CONFIG } from './server/initializers/config' +import { API_VERSION, FILES_CACHE, WEBSERVER, loadLanguages } from './server/initializers/constants' import { logger } from './server/helpers/logger' -import { API_VERSION, CONFIG, CACHE } from './server/initializers/constants' const missed = checkMissedConfig() if (missed.length !== 0) { @@ -43,6 +42,10 @@ checkFFmpeg(CONFIG) process.exit(-1) }) +checkNodeVersion() + +import { checkConfig, checkActivityPubUrls, checkFFmpegVersion } from './server/initializers/checker-after-init' + const errorMessage = checkConfig() if (errorMessage !== null) { throw new Error(errorMessage) @@ -52,17 +55,24 @@ if (errorMessage !== null) { app.set('trust proxy', CONFIG.TRUST_PROXY) // Security middleware -app.use(helmet({ - frameguard: { +import { baseCSP } from './server/middlewares/csp' + +if (CONFIG.CSP.ENABLED) { + app.use(baseCSP) +} + +if (CONFIG.SECURITY.FRAMEGUARD.ENABLED) { + app.use(helmet.frameguard({ action: 'deny' // we only allow it for /videos/embed, see server/controllers/client.ts - }, - hsts: false -})) + })) +} // ----------- Database ----------- // Initialize database and models -import { initDatabaseModels } from './server/initializers/database' +import { initDatabaseModels, checkDatabaseConnectionOrDie } from './server/initializers/database' +checkDatabaseConnectionOrDie() + import { migrate } from './server/initializers/migrator' migrate() .then(() => initDatabaseModels(false)) @@ -72,31 +82,60 @@ migrate() process.exit(-1) }) +// ----------- Initialize ----------- +loadLanguages() + // ----------- PeerTube modules ----------- -import { installApplication } from './server/initializers' +import { installApplication } from './server/initializers/installer' import { Emailer } from './server/lib/emailer' import { JobQueue } from './server/lib/job-queue' -import { VideosPreviewCache } from './server/lib/cache' +import { VideosPreviewCache, VideosCaptionCache } from './server/lib/files-cache' import { activityPubRouter, apiRouter, clientsRouter, feedsRouter, staticRouter, + lazyStaticRouter, servicesRouter, + liveRouter, + pluginsRouter, webfingerRouter, trackerRouter, - createWebsocketServer + createWebsocketTrackerServer, + botsRouter, + downloadRouter } from './server/controllers' import { advertiseDoNotTrack } from './server/middlewares/dnt' import { Redis } from './server/lib/redis' -import { BadActorFollowScheduler } from './server/lib/schedulers/bad-actor-follow-scheduler' +import { ActorFollowScheduler } from './server/lib/schedulers/actor-follow-scheduler' +import { RemoveOldViewsScheduler } from './server/lib/schedulers/remove-old-views-scheduler' import { RemoveOldJobsScheduler } from './server/lib/schedulers/remove-old-jobs-scheduler' import { UpdateVideosScheduler } from './server/lib/schedulers/update-videos-scheduler' import { YoutubeDlUpdateScheduler } from './server/lib/schedulers/youtube-dl-update-scheduler' +import { VideosRedundancyScheduler } from './server/lib/schedulers/videos-redundancy-scheduler' +import { RemoveOldHistoryScheduler } from './server/lib/schedulers/remove-old-history-scheduler' +import { AutoFollowIndexInstances } from './server/lib/schedulers/auto-follow-index-instances' +import { RemoveDanglingResumableUploadsScheduler } from './server/lib/schedulers/remove-dangling-resumable-uploads-scheduler' +import { isHTTPSignatureDigestValid } from './server/helpers/peertube-crypto' +import { PeerTubeSocket } from './server/lib/peertube-socket' +import { updateStreamingPlaylistsInfohashesIfNeeded } from './server/lib/hls' +import { PluginsCheckScheduler } from './server/lib/schedulers/plugins-check-scheduler' +import { PeerTubeVersionCheckScheduler } from './server/lib/schedulers/peertube-version-check-scheduler' +import { Hooks } from './server/lib/plugins/hooks' +import { PluginManager } from './server/lib/plugins/plugin-manager' +import { LiveManager } from './server/lib/live-manager' +import { HttpStatusCode } from './shared/core-utils/miscs/http-error-codes' +import { VideosTorrentCache } from '@server/lib/files-cache/videos-torrent-cache' +import { ServerConfigManager } from '@server/lib/server-config-manager' // ----------- Command line ----------- +cli + .option('--no-client', 'Start PeerTube without client interface') + .option('--no-plugins', 'Start PeerTube without plugins/themes enabled') + .parse(process.argv) + // ----------- App ----------- // Enable CORS for develop @@ -107,28 +146,43 @@ if (isTestInstance()) { credentials: true })) } + // For the logger -morgan.token('remote-addr', req => { - return (req.get('DNT') === '1') ? - anonymise(req.ip || (req.connection && req.connection.remoteAddress) || undefined, - 16, // bitmask for IPv4 - 16 // bitmask for IPv6 - ) : - req.ip +morgan.token('remote-addr', (req: express.Request) => { + if (CONFIG.LOG.ANONYMIZE_IP === true || req.get('DNT') === '1') { + return anonymize(req.ip, 16, 16) + } + + return req.ip +}) +morgan.token('user-agent', (req: express.Request) => { + if (req.get('DNT') === '1') { + return useragent.parse(req.get('user-agent')).family + } + + return req.get('user-agent') }) -morgan.token('user-agent', req => (req.get('DNT') === '1') ? - useragent.parse(req.get('user-agent')).family : req.get('user-agent')) app.use(morgan('combined', { - stream: { write: logger.info.bind(logger) } + stream: { + write: (str: string) => logger.info(str, { tags: [ 'http' ] }) + }, + skip: req => CONFIG.LOG.LOG_PING_REQUESTS === false && req.originalUrl === '/api/v1/ping' })) + // For body requests app.use(bodyParser.urlencoded({ extended: false })) app.use(bodyParser.json({ type: [ 'application/json', 'application/*+json' ], - limit: '500kb' + limit: '500kb', + verify: (req: express.Request, _, buf: Buffer) => { + const valid = isHTTPSignatureDigestValid(buf, req) + if (valid !== true) throw new Error('Invalid digest') + } })) + // Cookies app.use(cookieParser()) + // W3C DNT Tracking Status app.use(advertiseDoNotTrack) @@ -141,23 +195,33 @@ app.use(apiRoute, apiRouter) // Services (oembed...) app.use('/services', servicesRouter) +// Live streaming +app.use('/live', liveRouter) + +// Plugins & themes +app.use('/', pluginsRouter) + app.use('/', activityPubRouter) app.use('/', feedsRouter) app.use('/', webfingerRouter) app.use('/', trackerRouter) +app.use('/', botsRouter) // Static files app.use('/', staticRouter) +app.use('/', downloadRouter) +app.use('/', lazyStaticRouter) // Client files, last valid routes! -app.use('/', clientsRouter) +const cliOptions = cli.opts() +if (cliOptions.client) app.use('/', clientsRouter) // ----------- Errors ----------- // Catch 404 and forward to error handler app.use(function (req, res, next) { const err = new Error('Not Found') - err['status'] = 404 + err['status'] = HttpStatusCode.NOT_FOUND_404 next(err) }) @@ -171,10 +235,10 @@ app.use(function (err, req, res, next) { const sql = err.parent ? err.parent.sql : undefined logger.error('Error in controller.', { err: error, sql }) - return res.status(err.status || 500).end() + return res.status(err.status || HttpStatusCode.INTERNAL_SERVER_ERROR_500).end() }) -const server = createWebsocketServer(app) +const server = createWebsocketTrackerServer(app) // ----------- Run ----------- @@ -191,29 +255,55 @@ async function startApplication () { process.exit(-1) }) + checkFFmpegVersion() + .catch(err => logger.error('Cannot check ffmpeg version', { err })) + // Email initialization Emailer.Instance.init() - await Emailer.Instance.checkConnectionOrDie() - await JobQueue.Instance.init() + await Promise.all([ + Emailer.Instance.checkConnection(), + JobQueue.Instance.init(), + ServerConfigManager.Instance.init() + ]) // Caches initializations - VideosPreviewCache.Instance.init(CONFIG.CACHE.PREVIEWS.SIZE, CACHE.PREVIEWS.MAX_AGE) - VideosCaptionCache.Instance.init(CONFIG.CACHE.VIDEO_CAPTIONS.SIZE, CACHE.VIDEO_CAPTIONS.MAX_AGE) + VideosPreviewCache.Instance.init(CONFIG.CACHE.PREVIEWS.SIZE, FILES_CACHE.PREVIEWS.MAX_AGE) + VideosCaptionCache.Instance.init(CONFIG.CACHE.VIDEO_CAPTIONS.SIZE, FILES_CACHE.VIDEO_CAPTIONS.MAX_AGE) + VideosTorrentCache.Instance.init(CONFIG.CACHE.TORRENTS.SIZE, FILES_CACHE.TORRENTS.MAX_AGE) // Enable Schedulers - BadActorFollowScheduler.Instance.enable() + ActorFollowScheduler.Instance.enable() RemoveOldJobsScheduler.Instance.enable() UpdateVideosScheduler.Instance.enable() YoutubeDlUpdateScheduler.Instance.enable() + VideosRedundancyScheduler.Instance.enable() + RemoveOldHistoryScheduler.Instance.enable() + RemoveOldViewsScheduler.Instance.enable() + PluginsCheckScheduler.Instance.enable() + PeerTubeVersionCheckScheduler.Instance.enable() + AutoFollowIndexInstances.Instance.enable() + RemoveDanglingResumableUploadsScheduler.Instance.enable() // Redis initialization Redis.Instance.init() + PeerTubeSocket.Instance.init(server) + + updateStreamingPlaylistsInfohashesIfNeeded() + .catch(err => logger.error('Cannot update streaming playlist infohashes.', { err })) + + if (cliOptions.plugins) await PluginManager.Instance.registerPluginsAndThemes() + + LiveManager.Instance.init() + if (CONFIG.LIVE.ENABLED) LiveManager.Instance.run() + // Make server listening server.listen(port, hostname, () => { - logger.info('Server listening on %s:%d', hostname, port) - logger.info('Web server: %s', CONFIG.WEBSERVER.URL) + logger.info('HTTP server listening on %s:%d', hostname, port) + logger.info('Web server: %s', WEBSERVER.URL) + + Hooks.runAction('action:application.listening') }) process.on('exit', () => {